Re: [PEN-TEST] ports

[Fred Mobach <fred () MOBACH NL>]

Andrew Brown wrote:

> > > I'm wondering if anyone knows of any URLs which list everything that would
> > > be on certain ports.  I know of a large /etc/services file on the web at
> > > this URL:
> > > http://people.redhat.com/alikins/services.txt
> > > but it is not complete.  Specifically, I am trying to find out what runs
> > > on ports 6010 and 6011 on linux boxes.
>
> that seems to be a rough copy of the regular iana ports (or services)
> list.  good, but by no means complete.
>
> > x11               6010/tcp              # x window system
> > x11               6010/udp              # x window system
> > x11               6011/tcp              # x window system
> > x11               6011/udp              # x window system
> >
> > i found the above info at  http://www.graffiti.com/services
> > hope this helps,
>
> that one's mine :), and if you find things that aren't listed in it,
> please drop me a line.  i'm trying to make it as comprehensive as
> possible, although keep in mind that the more that goes into it...the
> less useful it might actually be to you.  as was discussed recently on
> the nmap-hackers lists (nmap-hackers () insecure org), the knowledge that
> (a) a port is open and (b) what it's supposed to be used for do *not*
> mean that's actually what it is.

By example the system might be running a Deception ToolKit like that of Fred
Cohen (http://all.net/).

Regards,

Fred Mobach
fred () mobach nl